Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111EE2/420F630A1D9F11E2A72FBB8F08B02CD2/L-xEr8Mx34paY6L1hB6AnZey99A.mft
File:                     L-xEr8Mx34paY6L1hB6AnZey99A.mft (raw, json)
Hash identifier:          vE3hZgsW3bFY+rdqIdo2GdNq3FTazT8K9jUsXZk96co=
Subject key identifier:   13:41:40:92:84:22:6D:83:16:CA:DF:10:5B:4D:9D:F4:30:8F:65:75
Authority key identifier: 2F:EC:44:AF:C3:31:DF:8A:5A:63:A2:F5:84:1E:80:9D:97:B2:F7:D0
Certificate issuer:       /CN=A9111EE2/serialNumber=2FEC44AFC331DF8A5A63A2F5841E809D97B2F7D0
Certificate serial:       3468
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-xEr8Mx34paY6L1hB6AnZey99A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111EE2/420F630A1D9F11E2A72FBB8F08B02CD2/L-xEr8Mx34paY6L1hB6AnZey99A.mft
Manifest number:          3468
Signing time:             Fri 04 Apr 2025 15:04:26 +0000
Manifest this update:     Fri 04 Apr 2025 15:04:25 +0000
Manifest next update:     Fri 11 Apr 2025 15:04:25 +0000
Files and hashes:         1: L-xEr8Mx34paY6L1hB6AnZey99A.crl (hash: Pn/L/Z+EqEFP6XJENqT11xFFnih6rtyBgjdGwK0HSsM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111EE2/420F630A1D9F11E2A72FBB8F08B02CD2/L-xEr8Mx34paY6L1hB6AnZey99A.crl
                          rsync://rpki.apnic.net/member_repository/A9111EE2/420F630A1D9F11E2A72FBB8F08B02CD2/L-xEr8Mx34paY6L1hB6AnZey99A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-xEr8Mx34paY6L1hB6AnZey99A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 15:04:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13416 (0x3468)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111EE2
        Validity
            Not Before: Apr  4 15:04:25 2025 GMT
            Not After : Apr 11 15:04:25 2025 GMT
        Subject: CN=67eff4fa-cbc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2e:45:f8:cb:e3:20:7a:33:0f:9d:96:f1:0d:
                    d9:88:1f:75:b2:9b:3a:ae:43:10:1e:29:98:3e:e0:
                    4f:a1:78:21:54:d1:8d:8b:34:e4:91:fa:82:d8:6f:
                    80:d6:3f:55:2c:da:7d:cb:45:3b:3e:9b:b6:78:ec:
                    d7:8d:99:c3:9e:fe:8c:b3:d6:b6:a9:c7:58:aa:6e:
                    b6:f3:6e:24:6c:b1:fb:4a:9a:9a:56:7c:90:b7:ec:
                    27:e4:ba:82:04:c3:b7:59:a3:30:6b:01:e9:e4:9c:
                    9d:85:df:55:60:e1:8d:80:4c:db:c4:c4:51:04:d7:
                    c6:a4:23:af:8b:4f:ae:25:77:41:9c:f4:5c:51:f0:
                    a6:c7:bc:21:c5:1c:3d:25:53:d9:1e:78:cc:b4:56:
                    f9:ec:c5:78:e3:22:aa:00:e9:7e:10:2e:8f:a3:ae:
                    59:5c:96:57:6b:fc:d2:05:f8:5c:bf:73:0b:b8:d4:
                    30:07:76:83:23:e1:df:ec:07:c0:b6:12:c1:c4:14:
                    26:50:2f:00:69:a4:5d:9b:cc:3b:7a:51:19:a3:c3:
                    55:db:d4:8f:79:9e:66:60:7d:f2:56:2f:f4:1a:31:
                    93:8b:4e:0a:9f:37:9b:c0:9f:0c:2d:e7:00:bb:ed:
                    c4:d4:12:dc:20:40:19:70:c1:20:c5:68:f5:38:2e:
                    c3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:41:40:92:84:22:6D:83:16:CA:DF:10:5B:4D:9D:F4:30:8F:65:75
            X509v3 Authority Key Identifier:
                keyid:2F:EC:44:AF:C3:31:DF:8A:5A:63:A2:F5:84:1E:80:9D:97:B2:F7:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111EE2/420F630A1D9F11E2A72FBB8F08B02CD2/L-xEr8Mx34paY6L1hB6AnZey99A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-xEr8Mx34paY6L1hB6AnZey99A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111EE2/420F630A1D9F11E2A72FBB8F08B02CD2/L-xEr8Mx34paY6L1hB6AnZey99A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:2d:76:97:7a:e9:47:e5:a6:4a:f3:65:f4:0a:8e:66:ac:fb:
         ad:83:8c:5c:cc:5a:8a:36:1a:13:f9:b0:2b:de:fe:81:80:2c:
         19:ca:25:a2:42:68:37:5d:9c:26:3c:0a:ea:9a:6d:ec:20:58:
         fa:fe:99:66:6a:59:a5:11:d8:06:b6:21:cf:71:74:d0:8b:bf:
         8f:55:8e:dd:a4:5d:82:8f:e1:5e:b7:f4:8d:19:99:3a:56:d5:
         4b:21:a0:96:dc:cf:14:9b:85:d2:09:23:b7:7c:8c:79:61:3a:
         4c:61:36:c2:a7:50:b2:5f:4a:4f:7a:57:d5:4b:a0:4b:e8:0b:
         9e:09:49:f6:95:93:3e:6f:d4:53:9a:15:2f:94:a6:ed:ed:f8:
         50:61:c2:18:4b:1d:f1:e0:8d:b2:b8:d9:f8:15:6c:b1:86:5b:
         d2:83:f0:91:41:fd:1e:ea:82:95:b4:2f:06:75:cc:03:8e:2a:
         45:75:f6:18:cd:1d:6e:2b:cb:bd:00:94:f6:fd:e3:29:9e:72:
         0f:c0:83:41:a6:c4:ff:d9:e6:18:0a:19:44:d1:4a:c3:b2:13:
         d9:61:a8:9f:af:6a:85:8a:3c:f0:d6:00:fa:84:6f:2e:ce:36:
         76:1c:da:86:87:79:d7:af:7a:75:54:6e:6f:d6:35:d9:7e:4b:
         4e:c7:69:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:14:59 2025 by rpki-client